Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
File: D91746DE044F11EA8C37D012C4F9AE02.roa (raw, json)
Hash identifier: liuK4GzoDV4Wyb2t40R5cZyZpCOcxyykm4qNE0iKYKI=
Subject key identifier: E5:CE:1C:B4:B7:19:05:47:E4:FE:A4:E6:46:2C:35:75:13:3F:33:A8
Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial: 0CA2
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
Signing time: Tue 04 Nov 2025 18:37:23 +0000
ROA not before: Tue 04 Nov 2025 18:37:23 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139722
IP address blocks: 103.144.42.0/23 maxlen: 23
103.144.42.0/24 maxlen: 24
103.144.43.0/24 maxlen: 24
2405:6540::/48 maxlen: 48
2405:6540:1::/48 maxlen: 48
2405:6540:2::/48 maxlen: 48
2405:6540:3::/48 maxlen: 48
2405:6540:4::/48 maxlen: 48
2405:6540:5::/48 maxlen: 48
2405:6540:6::/48 maxlen: 48
2405:6540:7::/48 maxlen: 48
2405:6540:8::/48 maxlen: 48
2405:6540:9::/48 maxlen: 48
2405:6540:a::/48 maxlen: 48
2405:6540:b::/48 maxlen: 48
2405:6540:c::/48 maxlen: 48
2405:6540:d::/48 maxlen: 48
2405:6540:e::/48 maxlen: 48
2405:6540:f::/48 maxlen: 48
2405:6540:10::/48 maxlen: 48
2405:6540:11::/48 maxlen: 48
2405:6540:12::/48 maxlen: 48
2405:6540:13::/48 maxlen: 48
2405:6540:14::/48 maxlen: 48
2405:6540:15::/48 maxlen: 48
2405:6540:16::/48 maxlen: 48
2405:6540:17::/48 maxlen: 48
2405:6540:18::/48 maxlen: 48
2405:6540:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Validity
Not Before: Nov 4 18:37:23 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690a47e3-e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:f9:1d:80:fa:d9:c6:45:fc:61:7e:38:e4:
68:60:85:38:36:26:03:c0:73:a7:3c:9a:73:d4:85:
38:b5:66:45:53:10:4d:7b:be:9c:ca:d3:00:7d:a7:
f6:21:ab:b8:f2:61:b8:d4:4f:43:6f:db:9c:c3:c1:
4a:20:fd:ba:74:8d:18:e6:09:00:08:3e:50:2b:f1:
28:8a:7b:5f:5a:6c:0f:a5:83:a7:95:a4:e3:59:75:
83:70:72:57:ef:19:0b:c5:5e:f1:0c:b8:76:0c:33:
08:51:cc:98:9f:4a:8b:6d:80:ef:53:61:f6:ed:01:
8d:eb:1d:b2:35:2f:68:74:85:19:fb:f8:3c:1c:94:
10:63:e0:88:29:fb:08:39:45:1e:5f:fc:d8:da:f3:
6c:2c:29:2f:96:33:3c:af:e7:28:c9:60:1b:0f:fd:
45:b6:b2:0d:9d:28:7b:35:12:02:dc:2a:84:7b:08:
8f:c0:6b:e5:da:ce:f7:26:29:11:e4:44:21:6f:7c:
3d:be:e9:ee:c6:c4:0d:87:3c:f2:9b:0f:ca:c7:71:
95:16:0e:5b:e5:f1:e6:02:5e:dd:45:b7:25:df:57:
0f:a9:55:f7:78:17:6d:c3:c9:4d:a2:c8:7a:4d:8f:
1f:8a:77:27:df:b0:10:03:0d:55:4e:e1:73:a4:aa:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:1C:B4:B7:19:05:47:E4:FE:A4:E6:46:2C:35:75:13:3F:33:A8
X509v3 Authority Key Identifier:
keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.42.0/23
IPv6:
2405:6540::-2405:6540:19:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:c5:c1:96:4e:a5:e2:5e:b8:22:16:28:8a:a8:2b:f3:28:87:
f1:b8:ae:0b:f9:00:84:4a:ea:69:b6:81:06:6d:dd:41:63:03:
9d:cd:39:c1:88:49:67:1e:f6:b5:21:01:3c:38:71:f3:d6:c9:
cd:4d:81:69:d3:a4:0b:32:f5:6e:7b:f8:ed:9f:ec:c6:6e:6f:
18:2e:cc:6f:91:82:9e:fa:57:b4:93:f3:13:d5:bf:c3:70:11:
86:66:45:fe:70:57:10:f4:2e:12:b5:5a:e9:d6:ac:5b:f5:24:
47:06:c5:6a:4e:6e:11:e5:61:a3:e3:2d:da:9d:84:3b:86:80:
de:e7:0e:d2:d2:59:b2:ee:d5:80:55:d6:6e:5e:07:af:73:6c:
f9:cb:02:7d:b4:2e:87:fd:f6:c3:1c:61:fd:c6:27:aa:51:43:
50:f6:2f:50:c5:fb:1f:e2:20:1e:fc:2e:f8:ea:9a:90:32:d9:
c5:a1:c9:ab:6d:47:af:42:ec:ca:98:d4:65:8e:d7:a5:17:b0:
b8:1a:bc:2d:d7:0a:37:b9:6c:0c:40:b6:e1:5a:7f:43:37:99:
7f:e3:7e:4c:2e:7e:a6:9c:91:ba:3e:7c:6e:99:ed:af:f0:ca:
57:25:28:83:c3:cb:1d:d7:2d:10:57:e4:05:d0:d5:e3:cc:b6:
8a:42:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:18 2025 by rpki-client